CVE-2008-6992: Greensql Firewall

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", which is successfully parsed by MySQL.

Affected products

• Greensql Greensql Firewall: up to and including 0.8.3; version 0.3.4 only; version 0.3.5 only; version 0.8.2 only

Published 2009-08-19. Last modified 2026-06-16.